$OpenBSD: patch-conf_conf_xml_in,v 1.2 2016/11/19 12:25:27 sthen Exp $
--- conf/conf.xml.in.orig	Mon Oct 17 14:32:58 2016
+++ conf/conf.xml.in	Mon Nov 14 18:41:45 2016
@@ -31,7 +31,7 @@
 		<Logging>
 			<!-- Command line verbosity will overwrite configure file -->
 			<Verbosity>3</Verbosity>
-			<Syslog><Facility>local0</Facility></Syslog>
+			<Syslog><Facility>daemon</Facility></Syslog>
 		</Logging>
 		
 		<PolicyFile>@OPENDNSSEC_CONFIG_DIR@/kasp.xml</PolicyFile>
@@ -39,19 +39,17 @@
 	</Common>
 
 	<Enforcer>
-<!--
 		<Privileges>
-			<User>opendnssec</User>
-			<Group>opendnssec</Group>
+			<User>_opendnssec</User>
+			<Group>_opendnssec</Group>
 		</Privileges>
--->
 <!-- NOTE: Enforcer worker threads are not used; this option is ignored -->
 <!--
 		<WorkerThreads>4</WorkerThreads>
 -->
 
 		<!-- <PidFile>@OPENDNSSEC_ENFORCER_PIDFILE@</PidFile> -->
-		<Datastore><SQLite>@OPENDNSSEC_STATE_DIR@/kasp.db</SQLite></Datastore>
+		<Datastore><SQLite>@OPENDNSSEC_STATE_DIR@/db/kasp.db</SQLite></Datastore>
 		<Interval>PT3600S</Interval>
 		<!-- <ManualKeyGeneration/> -->
 		<!-- <RolloverNotification>P14D</RolloverNotification> -->
@@ -63,12 +61,10 @@
 	</Enforcer>
 
 	<Signer>
-<!--
 		<Privileges>
-			<User>opendnssec</User>
-			<Group>opendnssec</Group>
+			<User>_opendnssec</User>
+			<Group>_opendnssec</Group>
 		</Privileges>
--->
 
 		<!-- <PidFile>@OPENDNSSEC_SIGNER_PIDFILE@</PidFile> -->
 		<!-- <SocketFile>@OPENDNSSEC_SIGNER_SOCKET@</SocketFile> -->
